$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd5f7140-0784-37e7-afbd-6f24bb5cca84.roa File: cd5f7140-0784-37e7-afbd-6f24bb5cca84.roa (raw, json) Hash identifier: +jP+m1KLy/mfmEwZzj9NcbZN+dbrHQ3djS2DKcJHLiw= Subject key identifier: 57:F5:7D:C5:5A:52:E3:6F:98:65:76:53:07:AC:B7:DD:B3:C8:22:4A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E7634EB8F5C369326DDD45F60 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd5f7140-0784-37e7-afbd-6f24bb5cca84.roa Signing time: Sat 11 Jul 2026 09:00:12 +0000 ROA not before: Sat 11 Jul 2026 09:00:12 +0000 ROA not after: Fri 09 Oct 2026 09:00:12 +0000 asID: 7342 IP address blocks: 2620:74:7c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:76:34:eb:8f:5c:36:93:26:dd:d4:5f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 11 09:00:12 2026 GMT Not After : Oct 9 09:00:12 2026 GMT Subject: CN=97a6fe48-0737-4981-80e3-2c7de5c870c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ad:14:9c:d1:5f:7a:35:10:51:46:f4:2d:63: c9:37:f0:bd:66:e8:e1:26:e6:a1:a5:ca:96:df:35: 98:8e:60:94:fd:12:95:29:44:bd:df:67:63:85:bd: ff:9b:89:15:c2:c3:3c:d2:6a:2d:f0:11:b1:f7:1b: e6:8a:9d:11:a8:d9:3b:f5:92:70:ab:df:17:19:5b: f7:0d:cd:e2:78:a1:16:92:38:94:50:09:86:c3:ea: f5:01:32:58:e9:a5:b9:ca:f0:6f:a9:c6:05:b7:5c: fd:dd:18:9d:47:e6:3f:69:30:cc:c6:59:48:76:18: 59:0e:f9:36:d8:f6:76:cc:1f:63:0d:60:ee:91:47: fa:17:d0:72:fb:d4:d3:b5:86:66:d2:42:fd:82:95: 67:2d:34:ca:bd:74:8a:ff:26:96:60:a7:37:18:09: 6b:fa:a9:c2:36:33:f4:7a:32:5c:51:80:f9:0f:a6: a4:90:8a:aa:be:65:59:8e:18:11:18:31:8b:b8:af: c3:99:0d:ed:3e:1d:03:a5:56:ee:4a:86:d1:d1:3b: b2:c6:a3:ed:a9:54:3d:29:59:12:c1:70:5f:24:bf: dd:b6:00:70:c4:3a:dc:bb:96:bb:24:64:c3:08:a7: f5:78:6d:37:27:56:69:1d:e1:5b:dd:44:95:87:32: 16:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:F5:7D:C5:5A:52:E3:6F:98:65:76:53:07:AC:B7:DD:B3:C8:22:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd5f7140-0784-37e7-afbd-6f24bb5cca84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:7c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:6c:75:ac:0f:93:1f:b1:52:56:c2:84:16:b5:6e:59:a1:48: 43:9e:5b:0d:79:39:6d:7a:58:9c:c6:c7:13:71:8b:f0:34:89: 8c:23:b7:60:84:41:d0:b0:18:ed:6a:78:24:8a:03:63:06:8a: ca:38:47:e6:35:eb:45:98:1b:ca:a1:15:ee:14:01:67:6b:6a: 4e:38:60:e5:b3:8e:ee:17:6a:82:45:a7:09:ec:c7:7a:13:23: 00:d9:83:83:94:2e:a2:4e:9e:20:ed:d1:67:f0:10:c3:58:5a: c0:1c:e0:17:0a:fb:a2:f6:f7:cc:c7:d1:18:f1:b1:6a:e0:9d: a6:b0:83:87:b9:0e:1c:6a:2a:92:93:9d:c7:36:57:17:28:35: 70:24:a2:c9:7d:79:32:c4:75:7b:32:4d:e5:81:c7:2f:4a:f7: 74:e0:9b:06:86:b9:83:96:f0:a4:58:65:26:44:b2:d7:cf:5e: 56:56:bc:b2:14:e5:34:58:95:fe:0e:e4:5b:87:87:fa:ba:10: c5:96:d6:ee:87:5d:9e:d2:43:c9:4c:60:ca:e7:24:ea:62:14: 1a:41:77:1a:4c:2e:b9:93:ce:6a:d3:59:cd:74:32:71:30:5a: 0e:27:90:28:41:22:0b:2f:2e:bb:56:ab:f7:f9:f1:a2:f3:28: e5:85:23:81 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE52NOuPXDaTJt3UX2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk OTdhNmZlNDgtMDczNy00OTgxLTgwZTMtMmM3ZGU1Yzg3MGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv60UnNFfejUQUUb0LWPJN/C9ZujhJuahpcqW 3zWYjmCU/RKVKUS932djhb3/m4kVwsM80mot8BGx9xvmip0RqNk79ZJwq98XGVv3 Dc3ieKEWkjiUUAmGw+r1ATJY6aW5yvBvqcYFt1z93RidR+Y/aTDMxllIdhhZDvk2 2PZ2zB9jDWDukUf6F9By+9TTtYZm0kL9gpVnLTTKvXSK/yaWYKc3GAlr+qnCNjP0 ejJcUYD5D6akkIqqvmVZjhgRGDGLuK/DmQ3tPh0DpVbuSobR0TuyxqPtqVQ9KVkS wXBfJL/dtgBwxDrcu5a7JGTDCKf1eG03J1ZpHeFb3USVhzIWvwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFf1fcVaUuNvmGV2Uwest92zyCJKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2Q1ZjcxNDAtMDc4NC0z N2U3LWFmYmQtNmYyNGJiNWNjYTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAB8 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGFsdawPkx+xUlbChBa1blmhSEOeWw15OW16WJzGxxNxi/A0iYwj t2CEQdCwGO1qeCSKA2MGiso4R+Y160WYG8qhFe4UAWdrak44YOWzju4XaoJFpwns x3oTIwDZg4OULqJOniDt0WfwEMNYWsAc4BcK+6L298zH0RjxsWrgnaawg4e5Dhxq KpKTncc2VxcoNXAkosl9eTLEdXsyTeWBxy9K93TgmwaGuYOW8KRYZSZEstfPXlZW vLIU5TRYlf4O5FuHh/q6EMWW1u6HXZ7SQ8lMYMrnJOpiFBpBdxpMLrmTzmrTWc10 MnEwWg4nkChBIgsvLrtWq/f58aLzKOWFI4E= -----END CERTIFICATE-----Generated at Fri Jul 24 03:07:48 2026 by rpki-client